Detections
Analytics
RHEL-10-701100 - RHEL 10 must be configured to disable the Controller Area Network (CAN) kernel module.
Information
Disabling CAN protects the system against exploitation of any flaws in its implementation.Solution
Configure RHEL 10 to disable the ability to load the CAN kernel module.Create a drop-in if it does not already exist:
$ sudo vi /etc/modprobe.d/can.conf
Add the following lines to the file:
install can /bin/false
blacklist can
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_RHEL_10_V1R1_STIG.zip
Item Details
Audit Name: DISA Red Hat Enterprise Linux 10 STIG v1r1
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-7a., CAT|II, CCI|CCI-000381, Rule-ID|SV-281312r1167086_rule, STIG-ID|RHEL-10-701100, Vuln-ID|V-281312
Plugin: Unix
Control ID: 4c659786f352eef082a3830a39021201cb8f9b704c47749024fef7b315e31a74